Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4441058836E711F08BC2AFCFDAE4EC9C.roa
File: 4441058836E711F08BC2AFCFDAE4EC9C.roa (raw, json)
Hash identifier: WI4DNtcqKLIC4qnCd6fF8MckXemPOTR3sP/iOC7Nt6g=
Subject key identifier: EB:BF:41:D2:8D:CD:59:CD:93:0D:F5:4E:FB:2D:B1:A4:3C:5A:01:0C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1AEC
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4441058836E711F08BC2AFCFDAE4EC9C.roa
Signing time: Thu 22 May 2025 08:32:16 +0000
ROA not before: Thu 22 May 2025 08:32:11 +0000
ROA not after: Mon 22 May 2028 08:32:11 +0000
asID: 213734
IP address blocks: 154.16.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6892 (0x1aec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 22 08:32:11 2025 GMT
Not After : May 22 08:32:11 2028 GMT
Subject: CN=682ee110-0790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2e:d8:52:c1:96:f9:8a:e9:5f:48:f9:3c:2c:
e8:75:63:a8:a3:49:26:87:9a:d8:24:95:3a:ba:a6:
a2:06:fe:e0:52:c1:d5:c7:3d:72:21:f0:07:66:5d:
0b:41:b2:3f:8f:10:14:6c:ed:b9:b5:93:53:68:fd:
ad:4b:74:ae:75:27:2d:c4:56:db:5c:2f:30:7e:2a:
f5:8f:7d:5b:a0:a1:9f:67:ec:20:15:0c:40:f7:6e:
0e:c2:85:e5:d0:d6:1c:2f:af:8d:99:67:9c:8c:6b:
46:ce:c8:94:a2:b3:96:39:f5:db:0b:a5:2b:e2:5c:
bd:e0:65:24:68:f4:37:a3:88:df:92:9d:bd:7a:6d:
dc:60:72:da:fe:81:4b:f8:14:d0:a0:7f:3b:de:92:
78:44:95:90:53:51:1c:fb:66:fd:39:95:6a:2b:23:
68:b4:2c:26:97:5d:fe:8e:89:55:a9:26:22:5d:b1:
c9:66:a7:de:07:f4:91:3d:6c:93:1f:1e:13:4f:ab:
b3:97:aa:88:03:0b:00:b9:f6:3c:fa:d7:ca:fa:67:
fd:65:7f:54:7f:5e:50:b5:ac:c2:63:82:d1:d4:b3:
76:89:07:32:5b:de:c8:dc:04:0f:55:71:46:af:b8:
75:7a:44:9d:4d:8a:e1:e8:92:70:ae:97:24:2d:7f:
2b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BF:41:D2:8D:CD:59:CD:93:0D:F5:4E:FB:2D:B1:A4:3C:5A:01:0C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4441058836E711F08BC2AFCFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.0.0/24
Signature Algorithm: sha256WithRSAEncryption
22:50:28:28:f4:3b:b8:ab:ea:9f:88:a0:c9:59:f0:fb:59:8c:
9e:80:c7:68:45:cf:9f:42:14:71:c7:c9:4c:72:8d:13:c6:c9:
59:86:ec:72:f6:b7:8c:99:6d:64:9e:19:42:af:52:a4:39:05:
62:3f:7e:58:ee:e2:eb:d5:d2:c4:63:95:55:04:f1:e2:2a:4b:
03:25:6c:e3:82:3b:8b:74:4f:fd:ba:e8:5a:85:92:13:39:9b:
92:cb:c5:88:07:55:ee:c9:fd:a7:d9:e5:07:2c:a0:41:f2:b8:
8e:71:73:77:cc:89:d6:65:12:b0:65:17:b7:58:b9:0b:53:db:
9d:60:2f:40:a8:3f:82:31:25:13:dd:69:fa:db:f7:f9:8b:48:
be:bc:68:49:5f:77:63:81:e7:07:af:12:dd:05:58:45:f6:38:
f1:5b:d1:ff:5f:93:fe:e4:23:6d:87:1e:11:e1:c1:72:16:9d:
43:99:ec:cf:c4:fe:43:05:09:46:4f:53:f3:b6:e8:2b:af:c7:
ab:7c:89:c0:74:8c:68:8e:5b:1d:2a:b5:af:ec:3e:99:1f:23:
38:85:8f:b7:d0:ef:dc:a9:19:4d:d6:20:9b:4e:d5:9c:01:a0:
76:eb:70:39:7f:15:e7:24:39:f7:0a:05:bc:d1:66:0a:60:cb:
97:af:3e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 18:55:02 2025 by rpki-client